Initializing help system before first use

Execution Worker Access

An Xpress Insight Execution Worker is an instance of the Mosel Remote Launcher program running on a local or remote machine. The default configuration sets this service to accept requests to execute models from any requestor using the correct protocol.
The <installdir>/bin/xprmsrv.cfg file on the machine on which that the service is installed has several parameters for controlling the access and allowed operations as follows:
  • XPRMSRV_ACCESS specifies which IP addresses are allowed when accepting connections from remote requestors.
  • MOSEL_RESTR restricts what actions an executing model is allowed to perform (for example file I/O, shell commands, and so forth). The default is no restrictions.

Out of the box Xpress Insight will connect to the Execution Worker via TCP socket and will pass the data across this protocol in plain text. This can be secured by changing the connection string to use the xssh driver as opposed to the xsrv driver. This establishes a connection to the xprmsrv through an encrypted SSH tunnel. See the Adding or Editing an Execution Worker topic in http://www.fico.com/fico-xpress-optimization/docs/latest/insight_admin/index.html for details on how to do this.

Note: By default the xssh driver will use port 2515. This can be changed via the SSH_PORT configuration parameter within the xprmsrv.cfg file. Please ensure that any firewall rules are changed appropriately to allow remote access to this port.

For more information on the parameters in the configuration file of the Mosel Remote Launcher, see the information about Modules (mmjobs) in the Mosel Language Reference Manual.

Parent Topic Securing FICO Xpress Insight

© 2001-2023 Fair Isaac Corporation. All rights reserved. This documentation is the property of Fair Isaac Corporation (“FICO”). Receipt or possession of this documentation does not convey rights to disclose, reproduce, make derivative works, use, or allow others to use it except solely for internal evaluation purposes to determine whether to purchase a license to the software described in this documentation, or as otherwise set forth in a written software license agreement between you and FICO (or a FICO affiliate). Use of this documentation and the software described in it must conform strictly to the foregoing permitted uses, and no other use is permitted.